‘Chinese smartphone manufacturer supplies device with spyware as standard’ – update

G Data claims to have discovered a Chinese smartphone that is standard equipped with spyware. The rogue software masquerades as Google’s Play Store app and is part of the pre-installed applications, the German security company reports.

According to G Data, the spyware is on a device from the Chinese manufacturer Star, with the product name N9500. Various European web shops offer the device with quad-core processor for a maximum of 165 euros.

G Data said it discovered the spyware by accident after customers notified the company. Investigation revealed it to be a trojan – Android.Trojan.Uupay.D – that was apparently already on the phone and was disguised as the Google Play Store. “All the user sees is an app with the Google Play Store icon in the running processes. Furthermore, the application is completely hidden,” explains Christian Geschkat of G Data.

The spying capabilities would be invisible to the user, as the program deletes logs that should detect the activities. In addition, the software makes it impossible to perform security updates and the program cannot be disabled. In addition, it is not possible to remove it because it is integrated into the firmware of the Star phone, claims G Data.

The spyware sends the stolen data to a server in China, the German security company concludes. The malware can also install new applications unnoticed, so that, among other things, call data and captured photos can be viewed. As a result, more sensitive information is potentially on the street.

Update, 9 p.m. – Competitor Kaspersy would have discovered the same malware before. It is just not clear whether it is exactly the same software, because G Data’s research cannot be viewed.